[SYNCOPE-767] Password Policy: mustn't contain value of the following attributes case insensitive

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.1.3
• Fix Version/s: 1.1.9, 1.2.8, 2.0.0-M2
• Component/s: core
• Assignee: Francesco Chicchiriccò
• Reporter: Nicola Baiocco
• Created: 16/Feb/16 08:37
• Updated: 21/Mar/16 14:20
• Resolved: 16/Feb/16 09:45

Description

Improvement of class org.apache.syncope.core.policy.PasswordPolicyEnforcer

Instead of

if (password.contains(word)) {
                throw new PasswordPolicyException("Used word(s) not permitted");
}

use

if (StringUtils.containsIgnoreCase(password, word)) {
...
}